[Logwatch] SSHD Message - Not Picked Up by Logwatch

Chris Smith csmith@squiz.net
Tue, 08 Apr 2003 10:08:45 +1000


No problems :)

Just checking the service, that info only gets displayed if Detail is set 
to High (same for the Unresolvable IP's). You can either set detail to high 
or ask for the level to be changed for the next release to something lower 
.. I don't know who maintains that one (from the file it looks like Kirk).

You can change /etc/log.d/scripts/services/sshd line 169 to be a lower 
level for the moment until next release (if it gets changed).

Hope that helps :)

At 07:44 PM 4/7/03 -0400, Mike McCandless wrote:
>You know, I should have included that information - my mistake.
>
>Version - logwatch-4.3.1-1  (this is from an RPM)
>Detail = Low
>Service = All
>
>It's running on RH7.2
>
>----- Original Message -----
>From: "Chris Smith" <csmith@squiz.net>
>To: "Mike McCandless" <michael@prismbiz.com>; <logwatch@logwatch.org>
>Sent: Monday, April 07, 2003 7:00 PM
>Subject: Re: [Logwatch] SSHD Message - Not Picked Up by Logwatch
>
>
> > What version of logwatch are you using and what detail level ?
> >
> > Regards,
> >
> > At 11:12 AM 4/7/03 -0400, Mike McCandless wrote:
> > >I have noticed an occasional occurence of  the following in
> > >/var/log/messages, but LogWatch does not report it.  Is this a
> > >configuration screw-up on my part?
> > >
> > >Apr  6 15:23:17 myhostname sshd[28088]: Did not receive
>identification
> > >string from 61.185.217.86
> > >Apr  6 15:25:09 myhostname sshd[28097]: Did not receive
>identification
> > >string from 61.185.217.86
> > >
> > >
> > >--------------------------------------------------------
> > >Mike McCandless
> > >michael@prismbiz.com
> > >Red Hat Linux Certified Technician
> > >
> > >_______________________________________________
> > >Logwatch mailing list
> > >Logwatch@logwatch.org
> > >http://list.logwatch.org/lists/listinfo/logwatch
> >
> > Chris Smith
> >
> >  >> 92 Jarrett St Leichhardt, Sydney, NSW 2040 ...>
> > T: + 61 2 9568 6866
> > F: + 61 2 9568 6733
> > W: http://www.squiz.net/
> > .....>> Open Source - Own it - Squiz.net ...../>
>
>_______________________________________________
>Logwatch mailing list
>Logwatch@logwatch.org
>http://list.logwatch.org/lists/listinfo/logwatch

Chris Smith

 >> 92 Jarrett St Leichhardt, Sydney, NSW 2040 ...>
T: + 61 2 9568 6866
F: + 61 2 9568 6733
W: http://www.squiz.net/
.....>> Open Source - Own it - Squiz.net ...../>